pub fn check_runtime_patch(
patch: &Value,
base: &Value,
source: PatchSource,
) -> Result<()>Expand description
Refuse a runtime config-change patch that reaches past the keys its
source is allowed to set.
base is the current effective config as JSON, which makes the sandbox
rule directional exactly as the layer rule is: raising
<role>.sandbox.enforce is fine from either source, lowering it is a
consent act.